0

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

Binance freezes funny money after compromise of engineer’s laptop leads to $6.3 billion of bad trades

ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)

CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

php2shell one week later: Why one exploit doesn’t work everywhere

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it.Key takeawaysThe five vulnerable PHP sites we exposed to the internet were not compromised, and public proofs-of-concept (PoCs…